Am I bugged?

I need a sleuth or techie to help me

I have changed my password a few times but someone with access to my computer is telling me what I am doing here. No moral judgments please.

How can I scan me or my land for bugs? and limit access to sl in windows xp?

Thanks

Is it someone in game or in RL.. or both?

you are logging chat and IMs, you don't have a strong password on your Windows account, and your Application Data folder where the log files are stored by default isn't encrypted, so that anyone with physical access to your computer can find out all about your SL.

I mean this with all sincerity but for us tech impaired where is it and how do i find it and fix it? thanks

Edit > Preferences > Communication > Uncheck 'Log Chat' (assuming it's checked to begin with)

Chat log files in XP are kept in

C:\Documents and Settings\%username%\Application Data\SecondLife\slFirstName_slLastName

%username% is your windows user name

slFirstName_slLastName is your avatar name with an underscore in between the first and last names, such as SuezanneC_Baskerville.

The chat is stored in plain text files with extension txt, named chat for area chat, or by the name of the group with a txt extension for group chat, or by the name of the avatar plus a txt extension for individual IM sessions.

They could have a keystroke logger installed on the machine.

They could have chat loggers on your land in scripted objects in SL.

If you use a scripted object they gave you as an attachment there could be a chat relay in that.

They could have an alt and find out what you do in SL from you, or be one of the avatars you interact with in SL without you knowing it.

They could be watching you type when you change your password.

You say you've changed your password: do you mean your SL password or the password for logging onto Windows XP?

Set yourself as Administrator in XP and set up a password to log onto the system itself. Then set up a User account, and give that password to anyone else with access to the PC. Make sure that your Second Life program is only accessible on the Administrator account, and that all the relevant files are not shared. You can change the location of your chat log files in the Communications tab of your viewer, so they go into any folder you wish: preferably a non-shared one that the User account can't access.

The Elder Geek site is great for XP users. I referred to it a lot when I was running that OS. Here's its section on user accounts:

http://www.theeldergeek.com/user_accounts.htm

Also, it's a silly thing that many people overlook, but make sure you don't have 'remember password' checked on your SL login screen.

I suspect a well-hidden keylogger, and if you suspect one too then possibly the only way to get rid of it so you can set up these new passwords is a full reformat of your PC.

Thanks to all who responded. I have set up user accounts and for now do not keep chat logs anywhere. So this should narrow the leaks, god I hope its not a key logger!!

If you think you have a keylogger, try adAware (http://www.download.com/Ad-Aware-2008/3000-8022_4-10045910.html?part=dl-ad-aware&subj=dl&tag=top5&cdlPid=10844457) and or Spybot (http://www.safer-networking.org/en/spybotsd/index.html). Both excellent and free.

Lindal's Resident Geek here...

1. Secure your computer.
- Establish a password for each user account on the machine, especially the one YOU use.
- Consider making your usual account a "user" privileged account, and only use the Administrator account for installing software, etc. This adds extra work for you, but it may be worth it, as anyone who hacks your usual account will not have Administrator privileges.
- If your DSL modem or router does not have a NAT firewall, enable the Windows software firewall. You may want to do so anyway, even if you have a hardware firewall.
- Disable "Remote Access". This is a utility a tech can use to troubleshoot your machine, but it's also a vulnerability.
- Password protect your screensaver, so someone can't just come in while you're away from your keyboard and use your machine.
- Run at least TWO spyware/adware checker programs. No one utility can catch everything. I like the free Ad-Aware program, and the low-cost Spyware Doctor from PC Tools. While you are at it, run PC Tools' "Registry Mechanic" too. It's not a security application, but it will find and fix a host of registry problems.
- I do not recommend disabling your IM and chat logging, because you may need those logs. However, until you are sure you're secure, you could do so as a short term precaution.

2. Secure your Second Life.
- Change your password. Make sure it's a "strong" one, not an ordinary word, at least 8 characters long, and containing at least one number and one special character.
- Disable "remember my password" on the login screen.
- Check any items you regularly wear for mysterious scripts. One of them (especially if it was a gift) could be relaying your chat.
- Use a chat bug detector (MystiTool has one) to look for bugs on your land or in places you frequent.

If you are STILL being compromised after all this, you may have to wipe your hard drive and reinstall Windows and all your software. This is the "Dust off and nuke 'em from orbit...it's the only way to be sure" solution.